FBI: BlackShades infected half million computers

NEW YORK — More than a half million computers in over 100 countries were infected by sophisticated malware that lets cybercriminals take over a computer and hijack its webcam, authorities said as charges were announced Monday against more than 100 people worldwide.

The FBI described its investigation in criminal complaints unsealed in Manhattan federal court against five individuals. Meanwhile, police worldwide said they had recently arrested 97 people in 16 countries suspected of using or distributing the malicious software called BlackShades.

“This case is a strong reminder that no one is safe while using the Internet,” said Koen Hermans, an official representing the Netherlands in the European Union’s criminal investigation coordination unit, Eurojust. “It should serve as a warning and deterrent to those involved in the manufacture and use of this software.”

The FBI said the BlackShades Remote Access Tool has been sold since at least 2010 to several thousand users. The agency said one of the program’s co-creators is now cooperating with the government and had provided extensive information.

The malware lets hackers steal personal information, intercept keystrokes and hijack webcams to make secret recordings of users. BlackShades also can be used to encrypt and lock a computer’s data files, blocking the rightful owners from regaining access unless they pay a ransom.

Security experts have linked the program to attacks on Syrian dissidents in 2012 and attempts to steal data from more than a dozen French organizations last year. The low cost of the hacking tool has made it increasingly popular across the hacker underground, where variants have been circulating online for years.

Last year, security firm Symantec said that use of BlackShades was going up, with licenses for the program going for $40 to $100.

French officials said raids occurred last week after the FBI arrested two BlackShades developers and distributed a list of customers who had purchased the malware.

Law enforcement coordination agencies Europol and Eurojust, based in The Hague, Netherlands, said Monday that police in 13 European countries — Austria, Belgium, Britain, Croatia, Denmark, Estonia, Finland, France, Germany, Italy, Moldova, the Netherlands and Switzerland — as well as in the United States, Canada and Chile raided 359 properties and seized cash, firearms, drugs and more than 1,000 data storage devices.

The two European agencies declined to provide country-by-country breakdowns of arrests, details of items seized or the specific days when last week’s raids occurred.

In Paris, the state prosecutor’s office said French detectives arrested more than two dozen people during May 13 raids and described the global nature of the arrests and searches as an unprecedented “new form of judicial action.” It said those arrested were identified by the FBI as French “citizens who had acquired or used this software.”

In a BlackShades-related investigation before the latest global arrests, Dutch police earlier this year arrested an 18-year-old man for using the malware to take pictures of women and girls using about 2,000 computers.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Frank DeMiero founded and directed the Seattle Jazz Singers, a semi-professional vocal group. They are pictured here performing at the DeMiero Jazz Festival. (Photos courtesy the DeMiero family)
‘He dreamed out loud’: Remembering music educator Frank DeMiero

DeMiero founded the music department at Edmonds College and was a trailblazer for jazz choirs nationwide.

Provided photo 
Tug Buse sits in a period-correct small ship’s boat much like what could have been used by the Guatamozin in 1803 for an excursion up the Stillaguamish River.
Local historian tries to track down historic pistol

Tug Buse’s main theory traces back to a Puget Sound expedition that predated Lewis and Clark.

Archbishop Murphy High School on Friday, Feb. 28 in Everett, Washington. (Will Geschke / The Herald)
Former teacher charged with possession of child pornography

Using an online investigation tool, detectives uncovered five clips depicting sexual exploitation of minors.

A person waits in line at a pharmacy next to a sign advertising free flu shots with most insurance on Thursday, Feb. 27, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Have you had the flu yet, Snohomish County? You’re not alone.

The rate of flu-related hospitalizations is the highest it’s been in six years, county data shows, and there are no signs it will slow down soon.

City of Everett Principal Engineer Zach Brown talks about where some of the piping will connect to the Port Gardner Storage Facility, an 8-million-gallon waste water storage facility, on Thursday, Feb. 27, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Port Gardner Storage Facility will allow Everett to meet state outflow requirements

The facility will temporarily store combined sewer and wastewater during storm events, protecting the bay from untreated releases.

Founder of Snohomish County Indivisible Naomi Dietrich speaks to those gather for the senator office rally on Wednesday, Feb. 5, 2025 in Everett, Washington. (Olivia Vanni / The Herald)
Membership numbers are booming for Snohomish County’s Indivisible chapter

Snohomish County’s Indivisible chapter, a progressive action group, has seen… Continue reading

‘An uphill battle’: South County firefighter facing his toughest fight

Nick Jessen, 38, has stage four lung cancer, a disease disproportionately affecting his profession.

David Ngle works to attach another kite at Boxcar Park in Everett in 2020. Tuesday could see the first 67 degree day in the Everett area. (Kevin Clark / The Herald)
It’s looking a lot like spring in Snohomish County — at least on Tuesday

Everett area could see nearly 70 degrees before possible thunderstorms return on Wednesday.

Logo for news use featuring the municipality of Lake Stevens in Snohomish County, Washington. 220118
Man shot in leg in after confronting would-be thieves in Lake Stevens

Lake Stevens police said three suspects fled in a white vehicle, and seek public’s help with any information on the case.

Employees and patrons of the Everett Mall signed a timeline mural that traces the history of the 51-year-old indoor mall that was once considered the premier place to go shopping in the city. Thursday, March 20, 2025 (Aaron Kennedy / The Herald)
Mall mural offers nostalgic trip into the past

Past and present Everett Mall employees joined customers Thursday to view an artistic timeline of the once popular shopping mecca.

Elaina Jorgensen measures a tenon while volunteering with the Timber Framers Guild on Wednesday, March 19 in Monroe, Washington. (Will Geschke / The Herald)
Timber guild finds new use for salvaged wood

A nonprofit used timber from the 2024 bomb cyclone to construct a shelter for Flowing Lake Park in Monroe.

Edmonds Mayor Mike Rosen gives his State of the City address on Thursday, March 20 in Edmonds, Washington. (Will Geschke / The Herald)
Edmonds mayor talks budget at 2025 State of the City

Mayor Mike Rosen discussed the city’s deficit and highlights from his first year in office.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.